Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.59cb8...d4.exe

windows7-x64

10

NEAS.59cb8...d4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.59cb836ca6270602e37eaafa4dc352d4.exe

  • Size

    477KB

  • Sample

    231031-kj5snahh4x

  • MD5

    59cb836ca6270602e37eaafa4dc352d4

  • SHA1

    c0099e084e21fcca3ae65d83a94cbfd14e311ce7

  • SHA256

    f3d7321b91a9b86ff94087a000be04ac8395ddc63a0a96dda4382359c0bb11a0

  • SHA512

    710989d1f00a51c9c5db3501b63dd0c6f2a595eb035125e312d4f518eb40eb971530c12932b404d8977321474fa2e775700613f9d3206d64cad254fc2b2806c2

  • SSDEEP

    6144:kQtXZGVJNatjiKbaTjon/TNId/1fon/T9P7GSon/TNId/1fon/T2oI0YokOsfY7S:BX4JNatjieNIVyeNIVy2oIvPKO

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.59cb836ca6270602e37eaafa4dc352d4.exe

    • Size

      477KB

    • MD5

      59cb836ca6270602e37eaafa4dc352d4

    • SHA1

      c0099e084e21fcca3ae65d83a94cbfd14e311ce7

    • SHA256

      f3d7321b91a9b86ff94087a000be04ac8395ddc63a0a96dda4382359c0bb11a0

    • SHA512

      710989d1f00a51c9c5db3501b63dd0c6f2a595eb035125e312d4f518eb40eb971530c12932b404d8977321474fa2e775700613f9d3206d64cad254fc2b2806c2

    • SSDEEP

      6144:kQtXZGVJNatjiKbaTjon/TNId/1fon/T9P7GSon/TNId/1fon/T2oI0YokOsfY7S:BX4JNatjieNIVyeNIVy2oIvPKO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks